PowerView.py is a Python-based alternative to the PowerShell PowerView.ps1 script, designed for Active Directory enumeration and management. It offers a comprehensive suite of modules for querying, modifying, and analyzing AD objects, targeting security professionals and system administrators.

How It Works

Leveraging the ldap3 library, PowerView.py provides direct LDAP, LDAPS, and ADWS bindings for efficient interaction with Active Directory. It supports advanced authentication methods like Channel Binding and Seal and Sign, enhancing security and reliability. The tool also features an integrated vulnerability detection system that identifies common AD misconfigurations.

Quick Start & Requirements

• Installation: pip3 install powerview or pipx install "git+https://github.com/aniqfakhrul/powerview.py"
• Prerequisites: libkrb5-dev (Debian/Ubuntu) or krb5-devel (CentOS) for GSSAPI support.
• Documentation: Wiki

Highlighted Details

• Comprehensive module coverage for AD enumeration and manipulation.
• Integrated vulnerability detection with customizable rules (vulns.json).
• Model Context Protocol (MCP) server for AI assistant integration.
• Supports Channel Binding and Seal and Sign authentication.
• Relay mode for coerced authentication.

Maintenance & Community

The project is actively maintained. Community channels are not explicitly mentioned in the README.

Licensing & Compatibility

The project appears to be licensed under the MIT License, allowing for commercial use and integration with closed-source applications.

Limitations & Caveats

Some Kerberos functions may not be fully stable. The MCP feature requires separate installation (pip3 install .[mcp]). Using MCP with public AI models may expose sensitive AD data.